Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/ue70c0n0ZVOBcyor0QG-XDUcf64.roa
File:                     ue70c0n0ZVOBcyor0QG-XDUcf64.roa (raw, json)
Hash identifier:          s5uVrLeuAOG2LyqzARaY3gLbCOfcbphAxVzDbgdv+B0=
Subject key identifier:   B9:EE:F4:73:49:F4:65:53:81:73:2A:2B:D1:01:BE:5C:35:1C:7F:AE
Certificate issuer:       /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial:       11379E36
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/ue70c0n0ZVOBcyor0QG-XDUcf64.roa
Signing time:             Wed 09 Feb 2022 13:43:34 +0000
ROA not before:           Wed 09 Feb 2022 13:43:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        83.142.240.0/21 maxlen: 24
                          95.131.160.0/21 maxlen: 24
                          185.127.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288857654 (0x11379e36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
        Validity
            Not Before: Feb  9 13:43:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9eef47349f4655381732a2bd101be5c351c7fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:d2:40:72:8a:d7:94:ec:dd:53:6b:bd:78:
                    5e:fb:97:cd:2e:7b:24:f6:59:e0:57:22:d0:07:a4:
                    b0:1f:82:77:7a:27:61:91:24:d7:58:d7:59:2c:0a:
                    e3:74:69:63:fd:83:f7:91:08:a1:72:19:1c:2f:ca:
                    6d:6a:4c:c3:64:94:83:b6:37:1a:56:c0:0f:fb:eb:
                    fb:2d:95:b6:b0:93:70:87:f3:c2:11:3b:88:db:7c:
                    f0:18:4c:f2:20:04:5e:e0:32:3c:ca:7e:a7:8c:c7:
                    7d:66:6b:98:91:4f:9e:e7:0b:c0:dd:9a:d1:a9:b1:
                    3c:a7:2a:2f:c7:b9:fb:01:16:a8:9d:94:2c:b3:c9:
                    2b:4a:50:55:4f:e5:25:be:87:d3:95:dd:43:29:e7:
                    e8:33:1f:03:65:76:cb:48:97:b0:28:46:09:69:2d:
                    7a:08:60:87:09:04:b8:70:e8:d3:4f:95:a0:4d:46:
                    72:69:70:5c:26:7a:39:5e:2f:8b:86:a6:5d:7b:c2:
                    db:b4:e8:13:0a:14:a8:91:cf:b7:7d:17:b3:df:b9:
                    d8:54:97:48:b1:a5:e7:78:64:5c:d5:8e:f2:de:96:
                    26:05:29:ea:1a:3b:57:53:46:4c:88:0b:c1:05:ca:
                    02:91:b5:56:1f:28:cd:c5:08:08:d1:64:45:04:57:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EE:F4:73:49:F4:65:53:81:73:2A:2B:D1:01:BE:5C:35:1C:7F:AE
            X509v3 Authority Key Identifier:
                keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/ue70c0n0ZVOBcyor0QG-XDUcf64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.240.0/21
                  95.131.160.0/21
                  185.127.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:3e:fe:fb:ae:f0:76:85:9d:65:b9:0c:84:b1:c1:73:33:
         33:4e:67:a5:e5:74:34:11:1e:a8:ca:1c:76:96:60:f1:49:f0:
         e6:f0:33:2a:73:c1:bf:9a:c3:bb:23:5b:be:90:41:a1:a6:81:
         ca:9f:65:38:17:1f:e9:f2:d4:d1:bd:f3:05:3b:9c:5a:2c:54:
         da:6f:bb:ff:d0:e4:0c:92:93:96:d2:83:77:f5:05:a7:4f:a1:
         81:b1:96:b1:7a:66:cc:c6:8e:cd:d8:ff:25:e0:99:30:fe:b7:
         15:6d:00:6f:ed:93:d2:c7:16:f8:b1:9e:1b:bc:5c:38:6b:76:
         4e:0f:98:07:0c:cd:ff:8d:e5:29:d1:4b:2d:c6:79:e3:e8:8c:
         b6:9e:57:ab:45:75:a9:66:58:a6:35:72:99:f0:0d:65:34:43:
         3a:32:9e:7c:1a:ca:93:bc:5e:4b:e3:8a:5f:16:23:62:04:db:
         e7:68:a5:03:7a:24:8a:14:95:37:18:87:a7:50:4b:5d:af:24:
         cd:cb:76:6d:a4:1e:c0:f1:62:7c:b4:b0:b0:a4:b5:f6:38:99:
         bb:07:2a:7c:26:d3:99:54:ac:ad:15:e0:9a:0a:e8:74:5e:17:
         0f:e4:86:71:75:15:5a:4d:82:9f:5b:bc:43:28:b8:b3:bc:5f:
         a6:cb:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org